home

gwadsyncservice.exe

GWADSyncService

CAS Software AG

It runs as a separate (within the context of its own process) windows Service named “CAS Active Directory Synchronisation Service”.
Publisher:
CAS Software AG  (signed and verified)

Product:
GWADSyncService

Description:
GWADSyncService.exe

Version:
18.1.5.8462

MD5:
ed30663daf1e732ac7afeea6ce46c1f3

SHA-1:
ecdf53fb8302a6ae2f17be8e1747575d93ef1943

SHA-256:
fd534713a32eed087f67c8554ad51c7a683a98251a625edeec337af81a5dd3bd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 12:14:05 AM UTC  (today)

File size:
213.3 KB (218,456 bytes)

Product version:
18.1.5.8462

Copyright:
(c) CAS Software AG 2017

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\common files\cas-software\server\gwadsyncservice.exe

Digital Signature
Signed by:
CAS Software AG

Authority:
thawte, Inc.

Valid from:
12/11/2015 1:00:00 AM

Valid to:
1/7/2018 12:59:59 AM

Subject:
CN=CAS Software AG, OU=IT Services, O=CAS Software AG, L=Karlsruhe, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2F881FEA718D89C145AB9C0FDDD8F1E7

File PE Metadata
Compilation timestamp:
2/27/2017 12:34:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x1A748

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, A0, 7C, 41, 00, E8, C7, 6B, FE, FF, A1, A8, F4, 41, 00, 8B, 00, 8B, 10, FF, 52, 48, 8B, 0D, D8, B0, 41, 00, A1, A8, F4, 41, 00, 8B, 00, 8B, 15, 90, 56, 41, 00, 8B, 18, FF, 53, 44, BA, 18, A8, 41, 00, B1, 01, B8, 44, A8, 41, 00, E8, AE, 74, FE, FF, 84, C0, 75, 15, BA, 18, A8, 41, 00, B1, 01, B8, 60, A8, 41, 00, E8, 99, 74, FE, FF, 84, C0, 74, 5E, BA, 18, A8, 41, 00, B1, 01, B8, 44, A8, 41, 00, E8, 84, 74, FE, FF, 84, C0, 74, 13, BA, 80, A8, 41, 00, A1, 74, 3D, 40, 00, E8, A9...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
99 KB (101,376 bytes)

Service
Display name:
CAS Active Directory Synchronisation Service

Service name:
ADSSyncService

Type:
Win32OwnProcess


Scan gwadsyncservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.